Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F61E93E85E711F1B86839E9CE1D38B0.roa
File: 2F61E93E85E711F1B86839E9CE1D38B0.roa (raw, json)
Hash identifier: 8de6jCkWB9AC6HDkAhtkzS17s86U7hHgsQAO7cPpvfo=
Subject key identifier: 0E:1B:56:C8:16:86:45:DF:73:98:49:AC:EF:11:C2:5F:37:59:CA:05
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C771
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F61E93E85E711F1B86839E9CE1D38B0.roa
Signing time: Wed 22 Jul 2026 16:05:41 +0000
ROA not before: Wed 22 Jul 2026 16:05:37 +0000
ROA not after: Wed 09 Sep 2026 16:05:37 +0000
asID: 395793
IP address blocks: 45.192.165.0/24 maxlen: 24
45.192.166.0/24 maxlen: 24
45.194.0.0/24 maxlen: 24
45.194.1.0/24 maxlen: 24
45.194.24.0/24 maxlen: 24
45.195.255.0/24 maxlen: 24
45.198.228.0/24 maxlen: 24
45.198.229.0/24 maxlen: 24
45.198.230.0/24 maxlen: 24
45.198.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116593 (0x1c771)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 16:05:37 2026 GMT
Not After : Sep 9 16:05:37 2026 GMT
Subject: CN=6a60ea55-90bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cc:ff:d5:cf:ed:95:ab:2b:e5:d8:fa:d4:73:
68:b0:32:8c:d0:89:17:69:60:a2:32:6b:78:1a:9a:
e9:d9:0e:89:8d:6b:4e:5b:eb:b5:92:d5:6f:7f:9d:
d4:bf:67:aa:02:fd:85:c1:44:aa:52:72:52:a4:f6:
d9:11:0d:24:ce:4a:83:f8:3c:a2:45:a7:2b:2e:be:
15:1e:1b:9c:b2:73:8c:46:66:28:a4:1c:3a:ff:68:
80:84:70:c7:c4:93:20:2b:f1:0c:09:a9:1e:99:5f:
80:25:a5:b0:90:51:0e:d1:72:29:e3:4d:50:27:dd:
ce:fd:e1:8a:a6:a2:c4:d8:f4:91:77:8c:88:2d:96:
1d:23:a4:c2:b1:8a:8a:28:bb:ee:41:83:f5:d4:d2:
12:84:51:66:ee:a2:3c:1a:7c:e5:9f:77:c1:45:a8:
44:0c:6a:9b:cb:4c:8a:e3:5d:8c:c1:d7:4e:da:29:
50:db:6d:22:f5:ee:61:ad:0e:c2:11:bb:3d:25:c5:
5c:cb:d9:2c:d4:09:c4:4d:81:5c:11:0b:64:46:5d:
db:73:bc:43:06:56:77:54:72:8d:ed:c2:2d:42:49:
5a:4d:80:9c:b2:2b:5d:bc:5d:37:6f:bc:4b:42:4e:
3f:dc:39:7d:cc:af:6d:d6:f9:04:d1:6e:96:77:09:
4c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1B:56:C8:16:86:45:DF:73:98:49:AC:EF:11:C2:5F:37:59:CA:05
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F61E93E85E711F1B86839E9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.165.0-45.192.166.255
45.194.0.0/23
45.194.24.0/24
45.195.255.0/24
45.198.228.0/22
Signature Algorithm: sha256WithRSAEncryption
05:3f:32:5c:ea:2f:80:77:70:a6:28:d3:f7:23:8e:05:55:54:
3d:1f:ff:86:74:fe:43:81:f6:ef:cb:a7:c0:d7:f6:51:1e:39:
17:31:64:1c:53:8e:17:84:2f:b0:42:54:11:0a:a1:23:a2:63:
a5:61:4f:54:f3:c7:d9:b3:a7:4c:d8:da:04:18:e9:7d:a8:1a:
a1:d8:ae:aa:7b:db:ff:7e:7d:77:b1:81:35:73:1d:85:71:0b:
a1:80:70:36:2c:37:73:df:b0:df:f5:98:4e:c2:d3:c7:d9:a7:
d1:10:e1:46:f2:03:0a:51:b3:a7:81:b6:e3:ef:2b:c0:bb:40:
49:1f:ae:20:b0:9d:db:3b:e8:8a:2a:93:4d:08:96:db:49:ec:
af:1b:f9:7b:2a:cd:41:ee:08:42:b7:d8:d1:fa:01:27:21:a8:
67:ce:9d:0d:11:7b:61:fa:f1:08:29:a5:28:c2:28:00:e0:43:
6c:78:10:08:34:80:cc:49:82:d5:4b:4c:59:05:20:99:4f:fd:
db:9c:0b:b6:16:1d:c3:bb:3e:c0:54:30:65:2e:a4:aa:c3:87:
65:8d:03:19:3f:5a:2b:0d:62:d1:bf:ca:49:5d:17:9d:69:b5:
5a:89:ca:92:22:d9:67:88:d8:e6:e2:d0:8f:38:af:0b:ee:67:
35:32:6f:7a
-----BEGIN CERTIFICATE-----
MIIFoTCCBImgAwIBAgIDAcdxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzIyMTYwNTM3WhcNMjYwOTA5MTYwNTM3WjAYMRYw
FAYDVQQDEw02YTYwZWE1NS05MGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt8z/1c/tlasr5dj61HNosDKM0IkXaWCiMmt4Gprp2Q6JjWtOW+u1ktVv
f53Uv2eqAv2FwUSqUnJSpPbZEQ0kzkqD+DyiRacrLr4VHhucsnOMRmYopBw6/2iA
hHDHxJMgK/EMCakemV+AJaWwkFEO0XIp401QJ93O/eGKpqLE2PSRd4yILZYdI6TC
sYqKKLvuQYP11NIShFFm7qI8Gnzln3fBRahEDGqby0yK412MwddO2ilQ220i9e5h
rQ7CEbs9JcVcy9ks1AnETYFcEQtkRl3bc7xDBlZ3VHKN7cItQklaTYCcsitdvF03
b7xLQk4/3Dl9zK9t1vkE0W6WdwlMRQIDAQABo4ICwjCCAr4wHQYDVR0OBBYEFA4b
VsgWhkXfc5hJrO8Rwl83WcoFMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yRjYxRTkzRTg1RTcxMUYxQjg2ODM5RTlDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmMAwDBAAtwKUDBAAtwKYDBAEtwgAD
BAAtwhgDBAAtw/8DBAItxuQwDQYJKoZIhvcNAQELBQADggEBAAU/MlzqL4B3cKYo
0/cjjgVVVD0f/4Z0/kOB9u/Lp8DX9lEeORcxZBxTjheEL7BCVBEKoSOiY6VhT1Tz
x9mzp0zY2gQY6X2oGqHYrqp72/9+fXexgTVzHYVxC6GAcDYsN3PfsN/1mE7C08fZ
p9EQ4UbyAwpRs6eBtuPvK8C7QEkfriCwnds76Ioqk00IlttJ7K8b+XsqzUHuCEK3
2NH6ASchqGfOnQ0Re2H68QgppSjCKADgQ2x4EAg0gMxJgtVLTFkFIJlP/ducC7YW
HcO7PsBUMGUupKrDh2WNAxk/WisNYtG/ykldF51ptVqJypIi2WeI2Obi0I84rwvu
ZzUyb3o=
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:49:14 2026 by rpki-client